arXiv (Computer Science - Cryptography and Security) • 2h
QRS: Neuro-Symbolic Framework for Autonomous CodeQL Synthesis
The QRS (Query, Review, Sanitize) framework addresses the "Expert Bottleneck" in Static Application Security Testing (SAST) by transitioning LLMs from post-hoc triage to the generative core of the discovery pipeline. By autonomously synthesizing CodeQL queries via a neuro-symbolic triad, QRS enables the discovery of novel vulnerability patterns without manual query authorship. Testing on PyPI and CWE-Bench demonstrated high accuracy (up to 94.06%) and the identification of 41 vulnerabilities in Python, including 8 new CVEs. The system integrates a PoC generator to validate findings, significantly reducing false positives compared to traditional pattern-matching SAST tools.